The CISA® Exam
The CISA exam is one of the requirements to become a CISA. It is offered twice a year in June and December. It consists of 200 multiple-choice questions, administered during a four-hour session in multiple locations. The purpose of the exam is to test a candidate’s knowledge, evaluation and application of IS audit principles and practices and technical content areas.

The CISM® Exam
The CISM exam covers five information security management areas, each of which is further defined and detailed through task and knowledge statements. These areas and statements were developed by the CISM Certification Board and represent a job practice analysis of the work performed by information security managers as validated by prominent industry leaders, subject matter experts and industry practitioners. It is offered twice a year in June and December. It consists of 200 multiple-choice questions, administered during a four-hour session in multiple locations.

The CGEIT® Exam
The CGEIT exam measures an individual’s ability and knowledge as it pertains to the performance of his/her job. The content of the exam is modified
to reflect changes in technology and practices.
The current job practice contains the following practice areas (domains) and percentages:
• IT Governance Framework (25%)
• Strategic Alignment (15%)
• Value Delivery (15%)
• Risk Management (20%)
• Resource Management (13%)
• Performance Measurement (12%)

Note: The percentages listed with the domains indicate the emphasis or percentage of questions that will appear on the exam from each domain.
For a description of each domain’s task and knowledge statements, please refer to pages 8-11.
Although knowledge of Control Objectives for Information and related Technology (CobiT®) is not specifically tested on the CGEIT exam, the CobiT
control objectives or processes are reflected in the CGEIT job practice task statements. As such, a thorough review of CobiT is recommended for
candidate preparation for the CGEIT exam. To focus a candidate’s attention on the specific CobiT processes that relate to CGEIT practice analysis tasks,
go to www.isaca.org/cgeitguide.